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IN THE CLAIMS 

Please rewrite claims 1, 2, 12 and 23 as follows. A complete listing of the claims is 
provided, in accordance with the requirements of 37 CFR 1.121. 

1 .(currently amended) A computer-implemented method of validating a computer 
system comprising the steps of: (i) receiving data representative of a plurality of 
requirements for validating said computer system; (ii) generating a validation plan to 
validate the computer system based on said received data; (iii) determining a computing 
environment appropriate to said computer system based on said received data; (iv) 
generating a plurality of tests for the computer system to be performed during an 
implementation of said validation plan; (v) presenting said tests to a user as part of said 
implementation; (vi) receiving responses from said user as to a status of said tests; (vii) 
generating a validation report based on said responses; (viii) presenting a non-validation 
message if said validation report indicates said system failed one or more of said tests; (ix) 
presenting a validation message if said validation report indicates said system meets said 
tests; and, (x) repeating one or more of the foregoing steps until said validation report 
indicates said system meets said tests. 

2. (currently amended) A computer-implemented method of validating a computer 
system comprising the steps of: receiving a plurality of validation requirements for 
validating said computer system; receiving data representative of the results of performing 
each validation requirement, said results including whether said computer system 
achieved a particular requirement [ was achiev o d] and exception reports for each 
requirement that was not achieved; and, generating a report for each of said requirements, 
said report including a message indicating whether said system is validated if a defined set 
of said requirements are achieved. 

3. (original) The method according to claim 2 wherein said computer system is a 
computer system used in the pharmaceutical industry. 
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4. (original) The method according to claim 2 wherein said computer system is a 
computer system used in the health care industry. 

5. (original) The method according to claim 2 wherein said validation requirements 
include at least one of a installation qualification, operational qualification, performance 
qualification, a third-party qualification. 

6. (original) The method according to claim 4 wherein said third-party qualification is 
based on 21 CFR Part 11. 

7. (original) The method according to claim 6 wherein said installation qualification, said 
operational qualification, said performance qualification, and said third-party qualification 
each include at least one of a hardware requirement, a user requirement, a test objective, 
and a test instruction. 

8. (original) The method according to claim 6 wherein said validation requirement further 
includes an audit respective to said installation qualification, said operational qualification, 
said performance qualification, and said third-party qualification. 

9. (original) The method according to claim 8 wherein said audit is comprised of 
predefined checklist reflecting best practices applicable to an identifiable type of said 
system. 

10. (original) The method according to claim 2 wherein said report indicates that said 
requirements are not achieved unless an affirmative response that each requirement was 
achieved has been received. 

1 1 . (original) The method according to claim 2 comprising the additional step of 
presenting a report summarizing each of said requirements. 

12. (currently amended) An apparatus for validating a computer system comprising: an 
input means for receiving a plurality of validation requirements for validating said computer 
system; said input means additionally for receiving data representative of the results of 
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performing each validation requirement, said results including whether said computer 
system achieved a particular requirement [was ach i ovod ] and exception reports for each 
requirement that was not achieved; and, a processing means for generating a report for 
each of said requirements, said report including a message indicating whether said system 
is validated if a defined set of said requirements are achieved. 

13. (original) The apparatus according to claim 12 wherein said computer system is a 
computer system used in the pharmaceutical industry. 

14. (original) The apparatus according to claim 12 wherein said computer system is a 
computer system used in the health care industry. 

15. (original) The apparatus according to claim 12 wherein said validation requirements 
include at least one of a installation qualification, operational qualification, performance 
qualification, a third-party qualification. 

16. (original)The apparatus according to claim 15 wherein said third-party qualification is 
based on 21 CFR Part 11. 

17. (original) The apparatus according to claim 16 wherein said installation qualification, 
said operational qualification, said performance qualification, and said third-party 
qualification each include at least one of a hardware requirement, a user requirement, a 
test objective, and a test instruction. 

18. (original) The apparatus according to claim 16 wherein said validation requirement 
further includes an audit respective to said installation qualification, said operational 
qualification, said performance qualification, and said third-party qualification. 

19. (original) The apparatus according to claim 18 wherein said audit is comprised of 
predefined checklist reflecting best practices applicable to an identifiable type of said 
system. 
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20. (original) The apparatus according to claim 12 wherein said report indicates that said 
requirements are not achieved unless an affirmative response that each requirement was 
achieved has been received. 

21 . (original) The apparatus according to claim 12 comprising additional means for 
presenting a report summarizing each of said requirements. 

22. (original) A readable media storing a set of instructions executable on a computing 
device to perform the following steps: receiving a plurality of validation requirements for 
said computer system; receiving data representative of the results of performing each 
validation requirement, said results including whether a particular requirement was 
achieved and exception reports for each requirement that was not achieved; and, 
generating a report for each of said requirements, said report including a message 
indicating whether said system is validated if a defined set of said requirements are 
achieved. 

23. (currently amended) A method of restricting access to a computing apparatus 
comprising the steps of: delivering a computer-based training session to a user, said 
session for instructing said user how to operate said apparatus; generating a unique user 
code respective to said user provided said user successfully completes said training 
session; presenting a user-login dialogue on said apparatus, said dialogue requesting an 
identification of said user and said user code; allowing access to said computing apparatus 
if a received identification and a received user code match said user and said user code 
and otherwise refusing access to said computing apparatus. 
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